SlackBuilds Repository

15.0 > Network > slowhttptest (1.8.2)

slowhttptest (stress testing tool/DoS simulator)

SlowHTTPTest is a highly configurable tool that simulates some
Application Layer Denial of Service attacks. It works on majority
of Linux platforms, OSX and Cygwin - a Unix-like environment and
command-line interface for Microsoft Windows.

It implements most common low-bandwidth Application Layer DoS attacks,
such as slowloris, Slow HTTP POST, Slow Read attack (based on TCP
persist timer exploit) by draining concurrent connections pool, as
well as Apache Range Header attack by causing very significant memory
and CPU usage on the server.

Slowloris and Slow HTTP POST DoS attacks rely on the fact that the HTTP
protocol, by design, requires requests to be completely received by the
server before they are processed. If an HTTP request is not complete,
or if the transfer rate is very low, the server keeps its resources busy
waiting for the rest of the data. If the server keeps too many resources
busy, this creates a denial of service.

This tool is sending partial HTTP requests, trying to get denial of
service from target HTTP server.

Slow Read DoS attack aims the same resources as slowloris and slow POST,
but instead of prolonging the request, it sends legitimate HTTP request
and reads the response slowly.

DISCLAIMER: Keep in mind that slowhttptest is of little use as a
script kiddie tool. It cannot be pointed blindly at arbitrary targets,
like e.g. LOIC. Rather, where it excels is in its breadth of attack
options, high customizability and its in-depth analytics. As such, it
will be mostly useful for server administrators trying to stress test
their systems.

Maintained by: P.D. Parnoff
Keywords: ddos,pentest,stress test,slowloris,flood,security,network,http
ChangeLog: slowhttptest


Source Downloads:
slowhttptest-1.8.2.tar.gz (561fc6ba1bc2ffc478b63d4a122b0486)

Download SlackBuild:
slowhttptest.tar.gz.asc (FAQ)

(the SlackBuild does not include the source)

Validated for Slackware 15.0

See our HOWTO for instructions on how to use the contents of this repository.

Access to the repository is available via:
ftp git cgit http rsync

© 2006-2024 Project. All rights reserved.
Slackware® is a registered trademark of Patrick Volkerding
Linux® is a registered trademark of Linus Torvalds